CSRF (Cross-Site Request Forgery) is an attack that forces an end user to execute unwanted actions on a web application in which they are currently authenticated. It exploits the trust that a web application has in the user's browser.
* Authenticated Session Exploit: CSRF takes advantage of the fact that the user is already authenticated, making the attack appear legitimate.
* Unwanted Actions: The attacker tricks the user into performing actions without their knowledge.
Option D is correct as CSRF is the OWASP threat that exploits authenticated sessions to execute attacks.
Reference:
OWASP Documentation: Cross-Site Request Forgery (CSRF)